🤖 AI-Powered Threat Detection

YARA Rules Meet Artificial Intelligence

The next evolution in malware detection. SYARA combines the power of traditional YARA with semantic AI, enabling you to detect threats that change their words but not their intent.

10x
Better Detection
4
AI Models
100%
Open Source
The Challenge

Traditional YARA Falls Short in the GenAI Era

⚠️

Keyword Dependency

YARA relies on exact string matches. Attackers simply rephrase their malicious content to evade detection.

🔄

Endless Variations

GenAI can generate infinite variations of malicious prompts, making static rules obsolete.

📝

Manual Rule Writing

Security teams spend countless hours writing rules for every possible variation of an attack.

Architecture

How SYARA Works

A multi-layered approach combining traditional pattern matching with AI-powered semantic analysis

📄

Input

Text, Images, Audio, Video

Layer 1 - Fastest

String Matching

Traditional YARA regex patterns

⚡ Low Cost
Layer 2 - Fast

Semantic Similarity

SBERT embeddings for intent matching

💡 Moderate Cost
Layer 3 - Precise

ML Classification

Fine-tuned models for pattern detection

🎯 Higher Cost
Layer 4 - Most Powerful

LLM Evaluation

GPT-4 / Open source models

🚀 Highest Cost
Binary Files

Perceptual Hashing

Image/Audio/Video similarity

🖼️ Moderate Cost

Results

Matched Rules & Confidence Scores

💡 Smart Optimization: SYARA automatically executes layers in order of cost-efficiency, only invoking expensive models when necessary.

Capabilities

Powered by Modern AI

Everything you need to detect evolving threats in the GenAI era

🎯

Semantic Matching

Detect malicious intent even when the exact words change. Uses SBERT and transformer models to understand meaning, not just keywords.

"ignore previous instructions" matches "disregard prior prompts"
🤖

LLM Integration

Leverage GPT-4 or open-source LLMs for the most sophisticated threat detection. Perfect for zero-day attacks.

Supports OpenAI, Llama, Flan-T5
🖼️

Binary File Analysis

Detect malicious images, audio, and video using perceptual hashing. Identify phishing logos and deepfake content.

Match near-duplicate malware screenshots
📊

ML Classifiers

Fine-tuned models trained on your specific threat landscape for maximum precision and minimal false positives.

Custom training on your data

Cost Optimized

Automatic execution ordering from cheapest (regex) to most expensive (LLM). Only pays for what you need.

Smart caching & short-circuit evaluation
🔧

Fully Extensible

Bring your own models, embeddings, and preprocessing pipelines. Integrate with your existing security stack.

Python API + YAML config
Applications

Real-World Use Cases

🛡️

Prompt Injection Detection

Protect your LLM applications from malicious prompts designed to bypass safety guidelines.

🎣

Phishing Detection

Identify phishing websites and emails using both text analysis and logo/image matching.

🔓

Jailbreak Prevention

Detect attempts to jailbreak AI systems using DAN mode and similar techniques.

💉

Malicious JavaScript

Hunt for injected scripts and XSS attacks with semantic pattern matching.

📱

Malware Fingerprinting

Detect malware UI screenshots, icons, and visual artifacts using perceptual hashing.

📊

Data Exfiltration

Identify attempts to extract training data, system prompts, or sensitive information.

See It In Action

SYARA in 3 Minutes

Watch how easy it is to detect sophisticated threats

Coming Soon: Complete Tutorial Video

Learn how to write your first SYARA rule and detect prompt injection attacks

Get Started

Start Hunting Threats in Minutes

1

Install SYARA

pip install syara[all]
2

Write a Rule

rule prompt_injection: security
{
    strings:
        $s1 = "ignore previous" nocase

    similarity:
        $s2 = "ignore instructions" 0.8

    condition:
        $s1 or $s2
}
3

Scan for Threats

import syara

rules = syara.compile('rules.syara')
text = "Please disregard prior instructions"
matches = rules.match(text)

if matches[0].matched:
    print("🚨 Threat detected!")
Join Us

Built by Researchers, for Researchers

SYARA is a non-profit, community-driven project

Our Mission

We believe cybersecurity research should be accessible to everyone. SYARA is completely free and open-source, built to empower security researchers worldwide to detect and analyze threats in the GenAI era.

Share your rules, contribute to the codebase, or help us improve the documentation. Together, we can build the most powerful threat detection library for the AI age.

💬 Discussions

Ask questions, share ideas, and collaborate

Join Discussion

🐛 Report Issues

Found a bug? Let us know on GitHub

Report Issue

🤝 Contribute

Submit PRs, share rules, improve docs

Contribute

📝 Blog

Read tutorials, case studies, and research

Read Blog

Ready to Hunt Smarter?

Join hundreds of security researchers using SYARA to detect next-gen threats